Browse by Tags - Threat Detection and Response (ArcSight) Tips - OpenText Threat Detection and Response (ArcSight)

Knowledge Document: Clarifications when a Logger report does not contain any grid

Caroline Oest

An explanation is provided for the message "This report layout is not suitable for the Raw Text format output. This report does not contain any grid." for Logger reports that generate CSV files Environment ArcSight Logger 7.X.X Software…

Knowledge Document: Palo Alto Cortex XSOAR integration with ArcSight Logger

Caroline Oest

This article provides the steps for doing the integration of the Palo Alto Cortex XSOAR platform with ArcSight Logger Environment ArcSight Logger (Logger) 7.X.X Software and Appliance Form Factor Situation As part of a new requirement…

Knowledge Document: Logger software 'apache' service unable to start

Caroline Oest

Process 'apache' Execution failed due to port 443 is already in use and need to be stopped completely before starting it Environment Logger software 7.x Situation Process 'apache' Execution failed. Stop and start the service seperately…

Knowledge Document: The root password cannot be changed after a Logger appliance OS has been upgraded to RHEL 8.8

Caroline Oest

After a Logger appliance OS has been upgraded to RHEL 8.8, the root password cannot be changed Environment Logger L7700 OS upgrade from RHEL 7.9 to 8.8 Situation After a Logger appliance OS has been upgraded from RHEL 7.9 to RHEL…

Knowledge Document: Logger's configurations are not restored after restoring config backup

Caroline Oest

Logger's configurations are not restored after restoring config backup due to the restore procedure is not able to decompress them due to a missing RHEL 8.8 required parameter Environment Logger L7700 appliance running on RHEL 8.8 Software…

Video: How to fix Logger ReportEngine blank page

Caroline Oest

This video instruct you how to fix the issue "Logger Report Engine page blank."

Knowledge Document: Logger receivers performance

Caroline Oest

Environment ArcSight Logger version X Situation There is no limitation on the number or type of receivers, or its maximum throughput. However, adding more than 40 to 50 receivers may affect performance. A high incoming event rate and large event…

Knowledge Document: Slow searches from restored archives

Caroline Oest

Searching events from restored archives are very slow Environment ArcSight Logger Situation Events are not copied back to local storage when event archives are loaded. Instead, a pointer to the archive is activated and it is included…

Knowledge Document: Can't login through remote SSH with correct password

Caroline Oest

Environment ArcSight Logger/Arcmc Situation Having problems connecting to your server with SSH and get this error messages in the system logs sshd[0000]: input_userauth_request: invalid user <user> sshd[0000]: error: Could not get shadow information…

Knowledge Document: Logger Swap Memory Explanation

Caroline Oest

This KM describe how Logger' used memory in the OS server. Environment Logger Software 7.3.x OS: RHEL 8.x Situation Logger software installed in the RHEL 8.x server used high memory include the swap memory of the OS. Cause In the…

Knowledge Document: Exporting the total EPS per day as a CSV file on a Logger through the CLI

Caroline Oest

PostgreSQL queries are shared on how to export as a CSV file the total EPS per day that is ingested on a Logger that is using an EPS license Products: ArcSight Logger Environment ArcSight Logger 7.X.X, Software and Appliance…

Knowledge Document: The 08/2024 RHEL 8.8 OS Patch breaks the openssh binaries in Logger and ArcMC Appliances

Caroline Oest

Two workarounds are presented on how to restore the openssh binaries like scp and sftp on Logger and ArcMC Appliances after applying the 2024/08 OS update patch Environment ArcSight Logger Appliance L7700, 7.3.0 or later versions ArcSight…

Knowledge Doc: Logger Process 'insp' Not Monitored/Running After OS Upgrade

Elizabeth Knappen

Summary In Logger appliance, when upgrading RHEL OS to be 7.8, after reboot the process insp can't be started. Stuck in "Not monitored" status Products ArcSight Logger Environment Logger Appliance Gen9 Situation In Logger appliance, when upgrading RHEL…

over 1 year ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Knowledge Doc: Cannot import user list from Logger appliance to Fusion ArcMc

Elizabeth Knappen

Summary Error encountered while importing user(s). Error: Invalid request: Missing 'First Name' field. Missing 'Last Name' field. Products ArcSight Logger Environment ArcMC 3.1 Situation Unable to import users from Logger appliance to Logger software…

over 1 year ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Knowledge Doc: Logger CIFS Mount steps to resolve Permission Denied error

Elizabeth Knappen

Summary Some Logger customers may come across this permission issue when setting configuration backup to CIFS shared folders. Kindly Note: This is a suggestion and that all permission should be sought from the system administrator before making changes…

over 2 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Knowledge Doc: [ArcMC; Logger; ESM] SmartConnector Not Receiving events from Azure Event Hub

Elizabeth Knappen

Summary This is an observation on the Azure Event Hub SmartConnector. Some deployments have the cloud function apps disabled by default. Disabled Function App Settings Products ArcSight Management Center (ArcMC),ArcSight Logger,ArcSight Enterprise Security…

over 2 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Knowledge Doc: [Logger] Logger Process Not Starting Up on RHEL 8.5 Due to SELinux

Elizabeth Knappen

Summary Loggerd service may not start and systemd/systemctl may not be able to run its service. Products ArcSight Logger Environment Software Logger 7.x on RHEL 8.5 Situation The Linux systemd is unable to start the loggerd service either manually…

over 2 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

On Demand Webinar: How to Lower TCO and Reduce Exposure Time by Transitioning to ArcSight SaaS

Elizabeth Knappen

If you could change your SIEM solution tomorrow, which outcomes would you most like to realize? In this session, you will learn how transitioning from Logger to ArcSight SaaS will enable you to: Lower the total cost of ownership of your log management…

over 2 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Knowledge Doc: [Logger; ESM] SSL Troubleshooting Resources

Elizabeth Knappen

Summary Finding documentation concerning errors reported via openssl s_client isn't always clear. Here is a useful source for working certificate issues on our products. Products ArcSight Logger,ArcSight Enterprise Security Manager (ESM) Situation…

over 2 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Technical Insight Series: Best Practice for ArcSight Logger, Recording now available!

Caroline Oest

Technical Insights for You When: Wednesdays across multiple time zones Where: GoTo Webinar link provided to registered participants Cost: Free Register Now> Best Practice for ArcSight Logger, March 9 Speaker: Serguei Esquivel, WW Customer…

over 3 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

ArcSight Logger 7.2 and ArcMC 3.0 - Identified issue with NTP and fix is available

Kousalya_N

An issue was identified with the NTP service in Logger 7.2 and ArcMC 3.0, affecting mainly the appliances. Fix is now Generally Available thru the download portal. For details, please check the following documentation. Logger 7.2 - Known Issues (microfocus…

over 3 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Customer Success Story: Large Energy Company Required Sophisticated Regulation Compliance

Caroline Oest

As an energy provider this organization needs to comply with NERC (North American Electric Reliability Corporation) CIP (Critical Infrastructure Protection) regulations, to mitigate disturbances to electrical service delivery. Supported by Micro Focus…

over 3 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Security ArcSight Logger 7.1.1 General Availability

Caroline Oest

General Availability: Security ArcSight Logger 7.1.1 GA: 11/4/2020 Operational Details: The Standard Delivery method for our software is electronic. New orders receive a link via email where the software can be downloaded, which is specific…

over 3 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Webinar ArcSight 2020 en español, 23 de Octubre

Caroline Oest

Webinar ArcSight 2020 en español En Micro Focus, creemos que la mejor postura de seguridad proviene de un gran equipo humano-máquina que aproveche los puntos fuertes de cada uno: un veloz análisis por parte de las máquinas para identificar las pistas…

over 3 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Logger Data Migration Guide 7.0

Caroline Oest

Data Migration Between Loggers This document explains how to migrate data and event archive settings between supported Micro Focus Security ArcSight Loggers. The information in this guide applies to ADP Logger, standalone ArcSight Logger,version7.0…

over 3 years ago
OpenText Threat Detection and Response (ArcSight)
Threat Detection and Response (ArcSight) Tips

Menu

Resources